Atlas / MCP servers / hypabolic / Hypa

HypaBLOCK

Name: Hypa
Author: hypabolic

mcp/hypabolic/hypa

MCP server by hypabolic · Audited 2026-10-11

⚑ Report / re-scan Source ↗

Verdict

BLOCK

Grade

Trust score

40 /100

Exposed tools

1 1r · 0w · 0d

Transport

—

License

NOASSERTION

Stars

212

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

Hypa is a workspace for coding agents. It runs your agents in terminal panes, keeps them alive when you close the terminal, lets agents drive other panes, and cuts the noise from command output before it reaches an agent.

Hypa is local-first. It needs no cloud service.

What Hypa does

Workspace mux. hypa starts a local server that owns your panes. Attach from any terminal, detach, and attach again. Tabs, splits, workspaces, a sidebar, copy mode, popups, themes, and settings are built in.
Agent runtime. An agent in a Hypa pane can read other panes, start work in a new pane or a hidden pane, wait for another agent, and report its state. Hypa installs a skill that teaches an agent how.
Share and connect. Share a session with another machine. The other machine connects over QUIC, with TCP and TLS as the fallback. A certificate pin protects every connection.
Output compression. hypa -c "command" runs a command, removes noise from the output, and keeps what matters: errors, warnings, file paths, failing tests, and exit codes. The reduction is deterministic and local. It is not an LLM summary.

Install

Pick the channel that fits how you manage tools. Every channel installs the same release archive for your platform, so the mux works the same way in each.

Read from source at commit 9d7d166dfbc7OBSERVED · 2026-10-11

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code

claude mcp add pi-hypa -- npx -y @hypabolic/[email protected]

claude-desktop

{
  "mcpServers": {
    "pi-hypa": {
      "command": "npx",
      "args": [
        "-y",
        "@hypabolic/[email protected]"
      ]
    }
  }
}

Exposed tools (1)

1 read · 0 write · 0 destructive.

Tool	Risk	Description
`issues`	read	List issues

Trust audit

BLOCKgrade F · trust 40/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

Layer	What it checks	Result
L0	Provenance & inventory	WARN
L1	Static analysis of the code	FAIL
L2	Instruction surface (what it tells the agent)	FAIL
L3	Class-specific surface	PASS
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: none-observed
Network: declared (8 observation(s))
Shell: declared (2 observation(s))
Dependencies: not all pinned
Secrets in source: found

Findings (25)

HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95

packages/pi-hypa/extensions/mcp-proxy-bridge.ts:18

exec(command: string, args: string[], options?: Record<string, unknown>): Promise<HypaExecResult>;

Why it matters. evaluates text as code

Fix. remove; use a parser or a dispatch table

HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95

packages/pi-hypa/extensions/tools.ts:31

exec(command: string, args: string[], options?: Record<string, unknown>): Promise<HypaExecResult>;

Why it matters. evaluates text as code

Fix. remove; use a parser or a dispatch table

HIGHPrompt injection · prompt.zero_width · CWE-94, CWE-1427

tests/Hypa.GoldenTests/Fixtures/filters/ansi_strip/ansi_strip.verified.txt:1

Build succeeded.

Why it matters. invisible characters in instruction text

Fix. strip non-printing characters

HIGHPrompt injection · prompt.zero_width · CWE-94, CWE-1427

tests/Hypa.GoldenTests/Fixtures/filters/dotnet_msbuild_noise/dotnet_msbuild_noise.verified.txt:1

MyProject -> /project/bin/Debug/net10.0/MyProject.dll

Why it matters. invisible characters in instruction text

Fix. strip non-printing characters

HIGHPrompt injection · prompt.zero_width · CWE-94, CWE-1427

tests/Hypa.GoldenTests/Fixtures/reducers/dotnet_build_errors/dotnet_build_errors.verified.txt:1

Hypa.Runtime -> /repo/src/Hypa.Runtime/bin/Debug/net10.0/Hypa.Runtime.dll

Why it matters. invisible characters in instruction text

Fix. strip non-printing characters

HIGHPrompt injection · prompt.zero_width · CWE-94, CWE-1427

tests/Hypa.GoldenTests/Fixtures/reducers/dotnet_build_success/dotnet_build_success.verified.txt:1

Hypa.Runtime -> /repo/src/Hypa.Runtime/bin/Debug/net10.0/Hypa.Runtime.dll

Why it matters. invisible characters in instruction text

Fix. strip non-printing characters

HIGHPrompt injection · prompt.zero_width · CWE-94, CWE-1427

tests/Hypa.GoldenTests/Fixtures/reducers/dotnet_test_failures/dotnet_test_failures.verified.txt:1

Failed Hypa.UnitTests.Infrastructure.Reducers.DotnetBuildOutputCompressorTests.Compress_PreservesProjectTargetLine [12 ms]

Why it matters. invisible characters in instruction text

Fix. strip non-printing characters

MEDIUMInventory / provenance · inv.binary · CWE-1104

native/runtimes/linux-x64/native/libtree-sitter-markdown.so

libtree-sitter-markdown.so

Why it matters. a compiled or binary member cannot be reviewed from source

Fix. ship source, or explain the binary in the README

MEDIUMNetwork egress · net.raw_ip · CWE-200, CWE-319

src/Hypa.Infrastructure/Mcp/Auth/OAuthCallbackListener.cs:41

_listener.Prefixes.Add($"http://127.0.0.1:{_port}/callback/");

MEDIUMNetwork egress · net.raw_ip · CWE-200, CWE-319

src/Hypa.Infrastructure/Mcp/Auth/OAuthCallbackListener.cs:55

return new($"http://127.0.0.1:{_port}/callback");

MEDIUMHard-coded secrets · secret.aws · CWE-798, CWE-321

tests/Hypa.AgentRuntime.Tests/Support/RedactionRuleFixtures.cs:49

new("AwsAccessKey", "AKIAAAAAAAAAAAAAAAAA\n", "AKIAAAAAAAAAAAAAAAAA", true),